Encrypting your Cryptos! 


You don't need to pay a single dollar to secure your dollars. 


In the nature of the decentralized monetary system, there have unfortunately been 
numerous times where people have lost life-changing amounts of money due to simply having a bit 
of their data stolen, however | believe this is still better than having it out of your control. It may 
come with its own risks and issues, but if we care about having a free and decentralized future, 
then | think it's our responsibility to not only understand the nature of how our synthetic assets 
work, but also on how to protect them ourselves. 


There is no such thing as a flawless system of ensuring that your assets are never stolen; 
only decreasing the likelihood. If you feel you aren't up to the responsibility of Keeping your assets 
secure, then the best alternative in most cases is probably a broker. The only problem with that is 
that brokers come with some limitations, such as not offering staking (as well as any DeFi activity) 
and having high deposit minimums. And even then, it is technically being looked over by other 
human beings, so even if they have a great track record, you're still technically putting your money 
in the hands of other people. 


A lot of people also like to use hardware wallets. They are an excellent resource, but 
personally | could never bring myself to use one because not only do | fear the idea of either losing 
it or having it stolen, but what a hardware wallet does is technically an automated and simplified 
version of what you can do on a secure computer as long as you're careful. ' 


But through a short series of free applications, both online and offline, you can create a 
practically fail-safe way to secure your private keys and pneumonic phrases so long as you don't 
leave any traces along the way. This guide is designed for Windows users, but | believe most of 
these steps can be done on Mac and Linux as well. 


Step 1: Basic Encoding and file-storing 


This is the part most people are likely familiar with; getting a text document, copying down 
your private keys or seed phrases (or both) and saving it into a text document in a place people are 
unlikely to find. This one part can already have a few tweaks you should add to it when it comes to 
the way you copy it down. First of all, when you've copied the text into the text document, highlight 
all the text and Base64 Encode it, and do so at least twice. This is a commonly used quick way of 
encoding text and can be done entirely offline. The program | would recommend using for this is 


Notepad++. 
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And before you're done with the encoding, make sure to close the tab for this text 
document on Notepad++ before closing the whole program. That way no metadata Is saved. 
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Another thing you should do after that is to rename the file extension. No matter what you 
rename the file extension to (or if you just take away the extension as a whole), it will still be able to 
be opened on programs like Notepad++ to access the same data. In most cases, | would 
recommend something like a .dat or .dll file since that’s the kind of file nobody would think to try 
and open. Another tip is to place that file in a folder that is full of files that appear just like it, thus it 
will be camouflaged and it won't stand out. In this example, | made it look like a random 
configuration file in the folder of a video game | have installed. Also, of course, make sure that the 
name of the file doesn’t hint that it relates to crypto in any way. If it has the seed phrase to your 
Theta wallet, better name it FUNNY_MONKEY.DAT or something like that. Get creative! Although, 
that particular example | gave might stand out a bit... | named mine DefaultLinguistic.dat here. 


| | Name 


Date modified Type Size 
©] D3D9Drvdll 3/16/2016 9:29 PM Application exten... 182 KB 
|_| D3D9Drv.int 3/16/2016 9:29 PM INT File 1 KB 
E D3DDrv.dll 3/16/2016 9:29 PM Application exten... 169 KB 
_| D3DDrv.int 3/16/2016 9:29 PM INT File 1 KB 
$| Default.ini 3/16/2016 9:29 PM Configuration sett... 25 KB 
i DefaultLinguistic.dat 4/2/2022 2:24 PM DAT File 1 KE 
| DefaultLinux.ini 3/16/2016 9:29 PM Configuration sett... 90 KB 
$| DefaultMasterServer.ini 3/16/2016 9:29 PM Configuration sett... 1 KB 
$a] DefaultUnrealED.ini 3/16/2016 9:29 PM Configuration sett... 4KB 
bs | DefUser.ini 3/16/2016 9:29 PM Configuration sett... 5 KB 
a] Detected.ini 3/16/2016 9:30 PM Configuration sett... Ü KE 
|=| Detected.log 3/16/2016 9:30 PM Text Document 3 KE 
E Editor.dll 316/2016 9:29 PM Application exten... 1,200 KE 
|_| Editor.int 316/2016 9:29 PM INT File 5 KB 
|=| Editor.log 12/17/2020 1:22 AM Text Document 115 KB 
|_| Editor.u 3/6/2017 3:22 AM U File 140 KB 
EMP edsplash.bmp 9/14/2016 11:03 PM FastStene BMP File 302 KB 
| Emitter.dll 3/16/2016 9:29 PM Application exten... 226 KB 
| ] Emitter.u 3/17/2016 1:29 AM U File 75KB 
| Engine.dll 3/16/2016 929 PM Application exten... 1,620 KE 


Step 2: Creating an Encrypted File Container 


Here comes the more mischievous stuff. There are a few programs that can turn any file 
you want into a mountable virtual hard drive partition that is password protected, and it's designed 
so that it would be hard to even know that that file was a virtual hard disk at all. The program | use 
for creating and mounting these encrypted file containers is VeraCrypt. 

Now in the example | gave in Step 1, placing that file within the midst of those other game 
files like | did might have to be approached a bit differently in this case. Because now that 
“DefaultLinguistic.dat’ file is no longer going to be the prime file we're trying to hide. 

Instead, we're going to be putting that file inside another file’s encrypted container. First of 
all, when creating our encrypted file container, first create a new file of any kind (it doesn’t matter 
what, as long as it’s a new random file, such as a new text document). And make sure whatever 
file you use here contains no significant data that you'll want to access again, because that data is 
going to be wiped after you turn it into a file container. In this case, I'll just create another spoof .dat 
file: Editor.dat. 
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Now, after you've installed VeraCrypt, click on Create Volume, and then make sure Create 


an Encrypted File Container is selected before you click Next. 


3/16/2016 9:29 PM 
3/16/2016 9:30 PM 
3/16/2016 9:30 PM 
4/2/2022 2:50 PM 
16/2016 9:29 PM 
= ka 


M VeraCrypt = ~~ 


Volumes System Favorites Tools ‘Settings Help Homepage 






Drive Volume Size Encryption Algorithm Type A 






“ VeraCrypt Volume Creation Wizard 





VeraCrypt Volume Creation Wizard 


Create an encrypted file container 


Creates a virtual encrypted disk within a file. Recommended for inexperienced 
Users, 


More information 
O) Encrypt a non-system partition/drive 


Encrypts a non-system partition on any internal or external drive (e.g. a flash 
drive). Optionally, creates a hidden volume. 


Create Volume 


Volume 


y 


VeraCrypt 


(C Encrypt the system partition or entire system drive 


Encrypts the partition/drive where Windows is installed. Anyone who wants to 
gain access and use the system, read and write files, etc., will need to enter 
the correct password each time before Windows boots, Optionally, creates a 


[v] Never save hist hidden system, 





More information about system encryption 





Next step: 


| would reccomend just doing a Standard VeraCrypt volume in most cases. 
But if you want to take is a step further Hidden Volumes are like a spoof 
of a spoof designed to trick people who find out about your original hidden volume. 
It's a little more complex to understand. 


M VeraCrypt Volume Creation Wizard 


Volume Type 


Standard VeraCrypt volume 


Select this option if you want to create a normal VeraCrypt volume, 


(Ò Hidden VeraCrypt volume 


It may happen that you are forced by somebody to reveal the password to an 
encrypted volume. There are many situations where you cannot refuse to 
reveal the password (for example, due to extortion). Using a so-called hidden 
volume allows you to solve such situations without revealing the password to 
your volume. 


More information about hidden volumes 
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Next Step: 
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Volume Location 


hz] Never save history 


A VeraCrypt volume can reside in a file (called VeraCrypt container), which can reside 
on a hard disk, on a USB flash drive, etc. A VeraCrypt container is just like any 
normal file {it can be, for example, moved or deleted as any normal file). Click "Select 
File’ to choose a filename for the container and to select the location where you wish 
the container to be created, 


WARNING: If you select an existing file, VeraCrypt will NOT encrypt it; the file will be 
deleted and replaced with the newly created VeraCrypt container, You will be able to 
encrypt existing files (later on) by moving them to the VeraCrypt container that you 
are about to create now, 


Help Next > Cancel 
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Make sure that you select the new file you created here; not the one that you put your 
seed phrases into. This is the step where you're telling VeraCrypt what file you're turning into your 





secret volume. 
# DefaultLinux.ini 3/16/2016 9:29 PM Configuration sett... 30 KE 
#* DefaultMasterServer.ini 3/16/2016 9:29 PM Configuration sett... 1 KB 
x DefaultUnrealED.ini 3/16/2016 9:29 PM Configuration sett... 4 KE 
+ DefUser.ini 3/16/2016 9:29 PM Configuration sett... 5 KB 
Detected. ini 3/16/2016 9:30 PM Configuration sett... 0 KE 
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Next step: 











e VeraCrypt Volume Creation Wizard = ks 
Encryption Options 


Encryption Algorithm 


Test 


FIPS-approved cipher (Rijndael, published in 1998) that may be used by U.S. 
government departments and agencies to protect dassified information up to the 
Top Secret level, 256-bit key, 128-bit block, 14 rounds (AES-256), Mode of 
operation is XTS, 


More information on AES 
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Next Step: 


“ VeraCrypt Volume Creation Wizard = 4 


Volume Size 


©e Ow Oe On 


Free space on drive C:\ is 32.50 GiB 


Please specify the size of the container you want to create, 


If you create a dynamic (sparse-file) container, this parameter will specify its 
maximum possible size, 


Note that the minimum possible size of a FAT volume is 292 KiB, The minimum possible 
size of an exFAT volume is 424 KiB, The minimum possible size of an NTFS volume is 
3792 KIB, The minimum possible size of an ReFS volume is 642 MIB. 
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You'll probably barely need 1 MB for this kind of situation, but | think it’s a better idea to go 
to the KB section and type a random 3-digit number (so long as it’s at least a couple hundred) 
instead of just typing something like “1 MB”, because an exact file size of 1 MB might look a little bit 
suspicious and stand out. 


Next Step: 


“ VeraCrypt Volume Creation Wizard — x 


Volume Password 


[ ]Use keyfiles 
[| Display password 
[_| Use PIM 


Keyfiles... 


Itis very important that you choose a good password. You should avoid choosing 
one that contains only a single word that can be found in a dictionary (or a 
combination of 2, 3, or 4 such words). It should not contain any names or dates of 
birth. It should not be easy to guess. A good password is a random combination of 
upper and lower case letters, numbers, and special characters, such as @ “= $ * + 
etc. We recommend choosing a password consisting of 20 or more characters (the 
longer, the better). The maximum possible length is 128 characters. 
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| would personally recommend getting used to memorizing at least one unusually long 
password, but either way, any password of your choice is required here. This will be the password 
you enter every time you wan to mount this virtual drive we're creating. 


Next Step: 


“ VeraCrypt Volume Creation Wizard — x 


Volume Format 
ae | : [_] Quick Format 
Filesystem FAT v Cluster [C] Dynamic 
Random Poo: —t***+ +. AHHA rL L 
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Master Key: EERE 


Abort 


Done | Speed | Left | 


IMPORTANT: Move your mouse as randomly as possible within this window, The 
longer you move it, the better. This significantly increases the cryptographic strength 
of the encryption keys. Then dick Format to create the volume. 





Randomness Collected From Mouse Movements 


Help l < Back | | Cancel | 


This is VeraCrypt’s way of randomly generating a more random seed to make sure the 
volume can’t be decrypted by hackers. Just move your mouse around for 30 seconds or so, and 
that will add security to your volume. When you're happy with how random it is, just click Format 
and you've finished creating your volume! Now, onto mounting it: 


If VeraCrypt still shows the Volume Creation Wizard window, you can close out of it now. 
Go to the home window, select whatever Drive Letter you want it to be mounted as (doesn't really 
matter), and then click Select File. 
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Now, go to the directory of the folder where you made your File Container, and select that 
file we turned into a secret container: 
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Next, you click Mount, type in the password that you gave for your container back when 
you were creating it, and press OK! 
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So long as you didn’t make any typos, it should mount the volume in a few seconds. 
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As you can see, VeraCrypt has mounted the file and turned it into the Local Disk of the 
Drive Letter | selected. 


Now to do what this was meant for: Move the file that you stored your seed phrase/private 
keys in, and put it in this virtual drive! That way you have an already encrypted file within a whole 
encrypted volume, within another encrypted file! 

Once again for extra security (in case someone found out about this secret drive partition), 
make a bunch of other files that look just like the important one in order to camouflage it. 
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* C] Name Date rnodified 
| | InfoDefault.dat 4272022 2:24 PM 
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And as long as youre certain you have control over this new Volume you've created, you 
might want to delete the old copy of your text document with your seed phrases and make sure this 


volume is the only place you can find that data. 


And once you're done, all you have to do on VeraCrypt is to click the Dismount button, and 
then it’s left as if that secret volume you created was never there. If anything, go to Windows 
Explorer and go to the Quick Access section to make sure it didn’t list your recent files and folders, 
because it might have shown signs of the hidden drive or files relating to it. If so, just right click 


those files and click Remove from Quick Acccess: 
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Step 3: Cloud Storage without the usual Cloud Storage 


Problems 


Most people in these cases would recommend sticking to just your physical storage media, 
and | respect that in most cases. But what if you house burns down? What if you drop the USB 
stick you were keeping that partition on? Well, we all know Google loves to spy on everything apart 
from our brains, so Google Drive isn’t the greatest option, though it might seem convenient. 


But there is a fairly simple alternative: crypt.ee. It's an encrypted cloud storage service that 
has no access to your files or your login information. A free account gives you 100 MB, which is 
more than enough for this task. The creator, John Ozbay explains the site in this interview. Check 


out his awesome hairstyle! 
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After you sign up with your email, it gives you an Encryption Key, which can be anything 
you choose, although you should probably make it different than your original password. It’s like 
crypto in the sense that they have no knowledge of your encryption key, and that if you lose it, it’s 
lost for good. The only difference is that in this case, it isn’t randomly generated; you can make the 
key whatever you want it to be. 


Also, for another layer of security, | would recommend registering on Cryptee with a spoof 
email address. This is a trashy looking email address that’s designed to forward whatever email is 
sent to it to your real email. That way, you can receive ingoing emails from people and websites 
without them having any data on where you're actually receiving it. A good free website that lets 
you make multiple spoof email addresses is SimpleLogin. 
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But if you want practically a guarantee that throughout this process of signing up and 
uploading your encrypted file container to this site can leave no traces, | would do something else 
before accessing the site: Picking the right VPN and connecting to the Tor Network. 


VPNs have become very popular, but most people don't know just how much they're being 
lied to and ripped off. | subscribed to NordVPN for 2 years, but | decided to ditch it after | found out 
that they have a history of not genuinely caring about your privacy.’ It turns out that the free edition 
of ProtonVPN (created by the same creators of Protonmail) is actually more trustworthy and works 
almost as well as the paid service | had with NordVPN. | would recommend ProtonVPN as the best 
free VPN service right now. There is a VPN Chart created by Techlore that’s designed to compare 
the current VPNs and their different strengths and weaknesses. 


But even with a VPN activated from ProtonVPN, it couldn't hurt to add extra layers of 
protection, could it? Nowadays Brave Browser has made it pretty simple and convenient to connect 
to the Tor Network. Just click Alt+Shift+tN after opening the browser if you didn’t already see it in 
the dropdown menu. | could demonstrate it myself, but I’m tired of making all these screenshots, so 
screw it! Or if you don’t want to use Brave, you can also download the Tor Browser Bundle. 


But basically, connecting to Tor adds 3 more IP addresses to the one you already had 
spoofed from your VPN, so it’s liked having 4 VPNs at once. | just recommend this since it isn’t too 
hard to do. Just know that when you're logging into Cryptee through Tor, it may make you go 
through an annoying CAPTCHA. Just push your brain through that torture for 20 seconds. But god, 
| hate CAPTCHAs... 


But as long as you made sure you can log into your Cryptee account with your email, 
password, and encryption key, then you should be good to go! All you have to do then is drag on 
that file with the encrypted volume inside of it, and now you have it backed up on secure cloud 
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i https://techlore.tech/vpn 


storage! And once again, | would recommend uploading multiple similar-looking files in order to 
disguise it, just like we did in the previous two steps. 


Another option for internet-based backup storage is a program called Syncthing. It’s a 
private and decentralized way to sync folders between multiple computers or phones without 
anyone prying in between. | don’t know as much about how to use it, but if you want another 
backup plan in case you have two different secure hard drives in different physical locations, 
running this program could prove very useful. 


And that’s my guide on how to encrypt your seed phrases/private keys in 3 secure layers! 
1. Base64 encode 
2. Hide that file inside an encoded virtual disk 


3. Backup that virtual disk volume on could storage without a trace 


All at no cost; | hope this was helpful! 


~ Lava Mucus 


